Incident Management: Edit Incidents

Document created by RSA Information Design and Development on Jul 27, 2016Last modified by RSA Information Design and Development on Jul 27, 2016
Version 2Show Document
  • View in full screen mode
 

You can edit incidents in one of the following ways:

  • Edit an incident - Use this when you need to modify particulars of a single incident. 
  • Edit incidents in bulk - Use this when you have to modify a particular criteria for multiple incidents.

Edit an Incident

  1. In the Security Analytics menu, select Incidents > Queue.
  2. In the All Incidents view, select an incident.
  3. Click edit_incident.png.
    The Edit Incident dialog is displayed.
    edit_incident_dialog.png

    Note: Alternatively you can select Edit Incident under the actions column for the selected incident.

  4. Modify the required values.
  5. Click Save.
    The edited incident is displayed in the All Incidents view.

Note: This procedure can be performed in a similar way in the My Incidents view as well.

Edit Incidents in Bulk

  1. In the Security Analytics menu, select Incidents > Queue.
  2. In the All Incidents view, select 2 or more incidents.
  3. Click edit_incident.png.
    The Edit Incidents dialog is displayed.
    edit_incidents_bulk_dialog.png
  4. Modify the required values.
    The values that can be modified in bulk are Priority, Status, Assignee, and Categories. If you select a checkbox, any modifications in the values for that field (including clearing the value) are applied for that field for all selected Incidents. If the checkbox is not selected, that field is unchanged for the selected Incidents.
  5. Click Save.
    The edited incidents are displayed in the All Incidents view.

Note: This procedure can be performed in a similar way in the My Incident view as well.

You are here: Incident Management Process Flow > Edit Incidents

Attachments

    Outcomes